# Security contact for brayn.tech — RFC 9116
# NOTE: Contact/Canonical/Policy cannot read lib/site.ts or lib/legal/entity.ts.
# They are on the domain-migration checklist in docs/guides/deploy-vps.md, and
# scripts/legal-gate.mjs fails while the placeholder address below is unchanged.
# No Encryption: line — we publish no PGP key, and pointing at a key nobody
# monitors is worse than omitting it.
#
# Canonical names ONE origin (RFC 9116 §2.5.7) even though brain.corelab.uk is
# still served during the ADR-0052 cutover. A researcher fetching this file from
# the legacy host is meant to see the new canonical and report there.

Contact: mailto:hello@brayn.tech
Expires: 2027-08-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://brayn.tech/.well-known/security.txt
Policy: https://brayn.tech/security